Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132322e302f32332d3233203d3e20323632373537.roa
File:                     3138362e3232342e3132322e302f32332d3233203d3e20323632373537.roa (raw, json)
Hash identifier:          btKKzgtw8mISYXfF2LmIonx50m83d2RU3FhjybL/uFo=
Subject key identifier:   32:FA:8C:39:65:15:8D:20:43:F3:FC:3B:78:9A:78:10:15:41:C9:9C
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       062410547DCBF00C38D855E9A0F203604EBC9EA7
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132322e302f32332d3233203d3e20323632373537.roa
Signing time:             Sun 11 Aug 2024 20:43:14 +0000
ROA not before:           Sun 11 Aug 2024 20:38:14 +0000
ROA not after:            Sun 10 Aug 2025 20:43:14 +0000
asID:                     262757
IP address blocks:        186.224.122.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:24:10:54:7d:cb:f0:0c:38:d8:55:e9:a0:f2:03:60:4e:bc:9e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 11 20:38:14 2024 GMT
            Not After : Aug 10 20:43:14 2025 GMT
        Subject: CN=32FA8C3965158D2043F3FC3B789A78101541C99C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e9:e5:a1:47:40:e6:52:8c:b4:a3:2c:55:e8:
                    17:f3:ab:55:11:e5:e4:65:92:59:f4:48:2a:99:e8:
                    d0:16:f7:a2:c1:3b:8b:ec:08:85:95:55:6c:7c:18:
                    8b:1b:e3:e2:1a:ae:83:bb:40:68:be:c6:ed:6d:81:
                    53:eb:13:41:e1:0e:a3:9e:c0:4c:51:50:88:d0:2f:
                    d0:2d:bb:46:df:58:b4:ab:d7:61:40:02:90:17:30:
                    87:d5:9a:50:83:e3:8c:03:9f:1c:ed:df:ca:5c:aa:
                    07:21:3f:81:03:6d:33:3e:ea:27:27:00:63:6c:97:
                    78:8f:2c:7b:04:9d:09:e2:24:64:29:59:03:c6:52:
                    62:07:42:b1:a3:7f:9f:ab:3d:c8:a9:d8:d0:48:57:
                    ef:19:ab:09:75:97:7b:d9:fb:f0:0f:cb:30:fc:18:
                    5e:91:59:6d:fd:b4:39:c2:87:df:64:55:53:2f:ea:
                    49:bf:0c:a8:4c:e8:21:54:cb:8d:78:e9:ef:cb:01:
                    3d:17:a0:e5:fd:1f:6e:be:73:19:c8:67:6c:d0:a7:
                    03:23:64:8d:00:55:f6:e4:5b:95:47:b5:ec:31:60:
                    a8:46:ff:b3:87:74:87:17:3d:db:88:88:bb:95:e2:
                    c1:59:be:0a:1d:af:6a:db:55:cc:48:ed:f2:e1:ec:
                    35:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FA:8C:39:65:15:8D:20:43:F3:FC:3B:78:9A:78:10:15:41:C9:9C
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132322e302f32332d3233203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:7a:7b:7d:9e:e6:34:dd:8a:b9:49:12:77:cf:03:1a:98:59:
         d1:39:a3:36:41:11:c8:56:91:0c:8c:48:b5:b0:16:b8:96:c6:
         9a:27:dd:0c:73:6c:bd:bd:2a:a4:d1:66:22:f8:d5:73:85:c8:
         9f:5a:be:ba:83:ac:b6:66:ac:f3:d6:36:87:f2:d5:fa:32:c3:
         bd:12:bd:dc:04:f2:3b:e5:d8:ca:6d:cf:38:8e:e0:af:fc:3f:
         d5:fd:3e:a0:3c:1c:0d:2d:15:fe:d8:e8:07:8f:af:f0:f2:8a:
         7b:14:7a:92:a9:5d:a3:0e:36:62:23:04:3e:57:5b:a6:45:6b:
         1e:3e:3a:11:2a:91:24:02:ee:65:ca:14:5a:b6:55:30:f8:cc:
         59:f4:a9:c2:0c:d9:0c:c2:9f:3d:e3:89:4f:70:87:7d:40:bf:
         75:94:52:8d:b6:25:a2:aa:e3:d4:07:5e:a0:b5:38:9c:d8:8b:
         16:f9:1d:d8:d2:05:5f:a6:18:ba:71:6e:0a:c7:50:b7:52:df:
         7a:d0:d6:85:b1:c0:9c:0c:12:b1:e2:9e:d5:b2:33:9e:75:70:
         ea:2f:4f:5a:63:9c:d6:b2:b5:72:ae:bf:48:07:f4:8a:0a:6b:
         a2:fd:2c:80:a4:88:fe:85:41:de:f5:5d:0f:27:ba:ab:4c:63:
         9b:44:66:0d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUBiQQVH3L8Aw42FXpoPIDYE68nqcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjEwMzE4RjIzRkQ0QjZFMzc2OTk1OTg5QjNBN0EwRjlF
MkUyOUU0ODAeFw0yNDA4MTEyMDM4MTRaFw0yNTA4MTAyMDQzMTRaMDMxMTAvBgNV
BAMTKDMyRkE4QzM5NjUxNThEMjA0M0YzRkMzQjc4OUE3ODEwMTU0MUM5OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT6eWhR0DmUoy0oyxV6Bfzq1UR
5eRlkln0SCqZ6NAW96LBO4vsCIWVVWx8GIsb4+IaroO7QGi+xu1tgVPrE0HhDqOe
wExRUIjQL9Atu0bfWLSr12FAApAXMIfVmlCD44wDnxzt38pcqgchP4EDbTM+6icn
AGNsl3iPLHsEnQniJGQpWQPGUmIHQrGjf5+rPcip2NBIV+8Zqwl1l3vZ+/APyzD8
GF6RWW39tDnCh99kVVMv6km/DKhM6CFUy4146e/LAT0XoOX9H26+cxnIZ2zQpwMj
ZI0AVfbkW5VHtewxYKhG/7OHdIcXPduIiLuV4sFZvgodr2rbVcxI7fLh7DUlAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUMvqMOWUVjSBD8/w7eJp4EBVByZwwHwYDVR0j
BBgwFoAUYQMY8j/UtuN2mVmJs6eg+eLinkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODdjcUtkN2U5clJtSEJFSkhYWEZOZ0FxNVBkRE1rVWFkakhMRU5QSFpC
cHcvMC82MTAzMThGMjNGRDRCNkUzNzY5OTU5ODlCM0E3QTBGOUUyRTI5RTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxMDMxOEYyM0ZENEI2RTM3
Njk5NTk4OUIzQTdBMEY5RTJFMjlFNDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg3Y3FLZDdlOXJSbUhCRUpIWFhGTmdBcTVQZERNa1VhZGpITEVOUEhaQnB3LzAv
MzEzODM2MmUzMjMyMzQyZTMxMzIzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM3MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbrgejANBgkqhkiG9w0BAQsFAAOCAQEAiXp7
fZ7mNN2KuUkSd88DGphZ0TmjNkERyFaRDIxItbAWuJbGmifdDHNsvb0qpNFmIvjV
c4XIn1q+uoOstmas89Y2h/LV+jLDvRK93ATyO+XYym3POI7gr/w/1f0+oDwcDS0V
/tjoB4+v8PKKexR6kqldow42YiMEPldbpkVrHj46ESqRJALuZcoUWrZVMPjMWfSp
wgzZDMKfPeOJT3CHfUC/dZRSjbYloqrj1AdeoLU4nNiLFvkd2NIFX6YYunFuCsdQ
t1LfetDWhbHAnAwSseKe1bIznnVw6i9PWmOc1rK1cq6/SAf0igprov0sgKSI/oVB
3vVdDye6q0xjm0RmDQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:01 2024 by rpki-client on console-fra.rpki-client.org